IC
Product
Incapptic Connect
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add Incapptic Connect to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22572 | 8.8 | Apr 11 | A non-admin user with user management permission can escalate his privilege to admin user via password reset functionality Affected: before 1.40.2 |
| CVE-2022-21828 | 7.2 | Mar 4 | A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unspecified attack vector in Incapptic… Affected: 1.35.3; 1.35.4; 1.35.5; 1.36.0; 1.37.0; 1.37.1; +5 more |
| CVE-2022-22571 | 4.8 | Apr 11 | An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions Affected: through 1.40.3 |
Showing 3